Computer product, method, and apparatus for analyzing computer system

1. A computer-readable medium that stores therein a computer program that causes a computer to analyze a processing state of a computer system that includes a plurality of types of a unit of processing, wherein the computer program causes the computer to execute: selecting a plurality of representative units of processing based on a weighted edit distance between individual units of the unit of processing, the unit of processing including one of protocol types that indicate protocol information, an edit distance between a first string: p and a second string: q being a number of minimum operations to be performed on the first string: p to correspond the first string: p with the second string: q, the weighted edit distance ed(p, q) being defined as: ed(p, q)=(edit distance between p and q)/(sum of string lengths of p and q), when p and q use a same protocol, the weighted edit distance ed(p, q) being defined as: ed(p, q)=(constant value), when p and q use different protocols from each other; grouping each unit of processing based on the weighted edit distance between the each unit of processing and each representative unit of processing selected at the selecting; and monitoring a processing state of the computer system using at least one of the representative units of processing selected at the selecting.

2. The computer-readable medium according to claim 1 , wherein the computer system is a computer system for a business, the unit of processing is a transaction, and elements that constitute the transaction include a protocol type that indicates protocol information.

3. The computer-readable medium according to claim 2 , wherein the computer system is a web service system that provides web-based services, and the protocol information is information related to a protocol belonging to a layer of a plurality of layers associated with the web-based service.

4. The computer-readable medium according to claim 3 , wherein the plurality of layers include a web server layer, an application server layer, and a database server layer.

5. The computer-readable medium according to claim 1 , wherein the selecting includes selecting a group of representative units of processing so as to minimize a total sum of edit distances in a unit of processing set between each unit of processing and a most similar representative unit of processing to the each unit of processing.

6. The computer-readable medium according to claim 1 , wherein the computer program further causes the computer to execute: displaying a grouping result obtained at the grouping, wherein the displaying includes displaying a summary that presents information related to a representative unit of processing, and displaying details that present information related to another unit of processing in addition to the representative unit of processing.

7. The computer-readable medium according to claim 1 , wherein the monitoring includes monitoring the processing state of the computer system based on the weighted edit distance between a new unit of processing newly processed by the computer system and each representative unit of processing selected at the selecting.

8. The computer-readable medium according to claim 1 , wherein the monitoring includes monitoring the processing state of the computer system based on a grouping result obtained at the grouping.

9. The computer-readable medium according to claim 8 , wherein the monitoring includes monitoring the processing state of the computer system based on an occurrence frequency of a unit of processing that belongs to none of unit of processing groups obtained at the grouping.

10. The computer-readable medium according to claim 9 , wherein the monitoring includes monitoring the processing state of the computer system based on a ratio between the occurrence frequency of the unit of processing that belongs to none of the unit of processing groups obtained at the grouping, and an occurrence frequency of another unit of processing that belongs to any one of the unit of processing groups.

11. The computer-readable medium according to claim 1 , wherein the monitoring includes issuing an alert, if an occurrence frequency per unit time of a representative unit of processing that is within a reference range during a selecting period departs from the reference range during a monitoring period.

12. The computer-readable medium according to claim 11 , wherein the reference range varies in accordance with a time zone.

13. The computer-readable medium according to claim 1 , wherein the selecting is re-executed every time a number of new units of processing newly processed by the computer system reaches a certain number, and the monitoring includes monitoring a processing state of the computer system based on a representative unit of processing newly selected if the selecting is re-executed.

14. A method of analyzing a processing state of a computer system that includes a plurality of types of a unit of processing, the method comprising: selecting a plurality of representative units of processing, using a processor, based on a weighted edit distance between individual units of the unit of processing, the unit of processing including one of protocol types that indicate protocol information, an edit distance between a first string: p and a second string: q being a number of minimum operations to be performed on the first string: p to correspond the first string: p with the second string: q, the weighted edit distance ed(p, q) being defined as: ed(p, q)=(edit distance between p and q)/(sum of string lengths of p and q), when p and q use a same protocol, the weighted edit distance ed(p, q) being defined as: ed(p, q)=(constant value), when p and q use different protocols from each other; grouping each unit of processing based on the weighted edit distance between the each unit of processing and each representative unit of processing selected at the selecting; and monitoring a processing state of the computer system using at least one of the representative units of processing selected at the selecting.

15. A system analyzing apparatus comprising: a processor configured to execute a procedure, the procedure comprising: selecting a plurality of representative units of processing based on a weighted edit distance between individual units of a unit of processing, the unit of processing including one of protocol types that indicate protocol information, an edit distance between a first string: p and a second string: q being a number of minimum operations to be performed on the first string: p to correspond the first string: p with the second string: q; grouping each unit of processing based on the weighted edit distance between the each unit of processing and each representative unit of processing selected by the selecting, the weighted edit distance ed(p, q) being defined as: ed(p, q)=(edit distance between p and q)/(sum of string lengths of p and q), when p and q use a same protocol, the weighted edit distance ed(p, q) being defined as: ed(p, q)=(constant value), when p and q use different protocols from each other; and monitoring a processing state of the computer system using at least one of the representative units of processing selected at the selecting.

16. The computer-readable medium according to claim 1 , wherein the operations to be performed on the first string include at least one of insertion, deletion and replacement of a character.